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FAULT INJECTION METHOD AND SYSTEM 



FIELD OF THE INVENTION 

[0001] This present invention relates to automatic testing for faults in integrated circuits, 
5 and more particularly, to a fault injection method and system. 

B ACKGROLTND OF THE INVENTION 

[0002] Equipment hardware that must perform system operations without interruption is 
continuously monitored by system diagnostic software. The diagnostic software monitors the 
equipment hardware for detection of fault conditions, and switches the system operations to run 

10 on redxmdant circuitry that would avoid the fault condition. The system diagnostic soft:ware itself 
needs to be tested. Fault injection is a procedure involving the injection of fault conditions 
directly on equipment hardware to test the systems diagnostic software for response to the 
injected fault conditions. However, the equipment hardware would lack input and output 
connection points for injection of fault conditions, because of crowded micro-processors, FPGAs 

15 and ASICs on typical circuit boards, and due to imbedding of interconnection points in interior 
layers of the typical circuit boards. 

[0003] Boundary scan (B-S) is a structured test technique that was developed to test 
integrated circuit (IC) interconnects on printed wire boards (PWBs) when physical access is 
impossible, difficult, or impractical. Implementation of the boundary scan test technique 
20 requires that a shift register and latch be placed at the ftmctional inputs and outputs (I/Os) of an 
IC. Each I/O pin can be driven to a known state or the current logic level can be captured and 
scanned out via a four-wire serial bus. 

[0004] The test bus and protocol as well as the behavior of the boundary cells are defined 
in IEEE Std. 1 149.1. This standard defines a standard test logic architecture for implementing 
25 boxmdary scan functions which can be included in an integrated circuit for the purpose of testing 
the interconnects to the integrated circuit, the integrated circuit itself, or other integrated circuits. 
The test architecture is defined to include a test access port (TAP) having connections for a test 
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clock pin (TCK), a test mode select pin (TMS), a test data input pin (TDI) and a test data output 
pin (TDO). The test architecture also includes a TAP controller (boundary-scan state machine). 
Thus, as IC pin counts increase, pin spacing decreases, and direct pin accessibility becomes 
increasingly difficult, boundary scan (B-S) is playing an increasing role in design verification, 
5 manufacturing, and the testing of new products. 

[0005] At present boimdary scan allows all pins of a B-S chip to be controlled uniformly 
by either system or B-S logic. The requirement that all pins are controlled by the same logic 
(that is, for the same chip, some pins cannot be controlled by system logic while others are 
controlled by B-S registers), however, limits B-S usage for many appUcations, for example, 
10 those applications requiring fault injection. 

[0006] Fault injection, also known as fault insertion, is a widely used method to develop 
high quality test for complex systems. Not only has it been used to verify fault tolerant 
capabilities and system-level built-in self test (BIST) hardware designs, but also used to develop 
and verify diagnostic software for highly reliable systems. It is very difficult and sometimes 

15 impossible to perform these system verification tasks via simulations at the board or system 

level. The most common fault injection method is the physical pin-level fault injection, where a 
stuck-at or open fault is injected to a pin of a chip via a switch or jumper. Usually only a handfiil 
pins are selected to be modified for fault injection due to a number of problems, such as 
restriction of physically accessible pins of highly dense package devices on a board, possible 

20 damage to the devices, lengthy labor intensive process to set up the physical fault injection, and 
so on. Hence, not only the resulting fault coverage is low but also the test process is very 
expensive, 

[0007] Previously, a number of fault injection methods and systems have been proposed 
for ASICs. In these methods and systems, the standard B-S cells and test access port (TAP) 
25 controllers are modified, and the instruction set is enhanced to provide a mechanism for 'virtual' 
fault injection compared to the traditional physical methods. Such an application is beyond the 
well-known B-S application for testing interconnects in manufacturing testing. And the 
appUcation can not be implemented in previously installed operating systems, because they have 
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previously existing DEEE 1 149.1 boundary scan standard compliant architecture, which do not 
have modified BS cells, and which can not be tested with modified TAP controllers. 

[0008] A number of fault injection methods and systems have been proposed. The first 
proposed method uses the SAMPLE/PRELOAD instruction to preload fault values, followed by 
5 another instruction to expose the fault values to the corresponding output pins. However, neither 
the implementation of the fault injection instruction nor the enhancement of the B-S cell to 
support fault injection have been given. 

[0009] The second proposed method is to use the standard B-S instruction (HIGHZ or 
CLAMP) to alter the output values for all the output pins of a B-S device. Although no 
10 modification of the TAP and B-S register is required at all to use this method, it is not sufficient 
in most of system verification. 

[0010] Another method and system has been proposed by Savio Chau in "Fault Injection 
Boundary Scan Design for Verification of Fault Tolerant Systems", Proc. of International Test 
Conference, October, 1994, pp. 677-681. Chau proposes to modify B-S circuitry to inject faults 
15 at individual pins, in which the value of the B-S register is used to determine if a fault is injected 
or not. 

[0011] Chau describes three B-S designs, each of which requires modification of IEEE 
1149.1 Boundary Scan standard compliant architecture to support fault injection. However, in 
the first design, the faulty value to be injected must be identical on all selected pins. 

20 Furthermore, the B-S data register is constrained from being shifted to update status during fault 
injection. The second design modifies tiie IEEE 1 149.1 Boundary Scan standard compUant 
architecture with a tri-state buffer for stuck-open fault injection. In the third design, the pin 
selection data, determining which pins will be injected with faults, is loaded into the update 
flip-flop (FF) of a modified B-S register. Once the fault injection enable FF is set in the 

25 instruction register of the modified B-S architecture, the fault injection values are injected on the 
selected pins. However, there are two main drawbacks of this design: (i) the fault injection 
selection data, which were previously shifted into the update FF of the B-S register, are 
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corrupted when entering the update state of the TAP controller while the fauU injection values 
are shifted in; (ii) the logic values of the fault injection pins are rippling when the fault injection 
values are shifting into the capture FF of the B-S register. 

[0012] In another reference, Nadeau-Dostie, B. et al., "A New Hardware Fault Insertion 
5 Scheme for System Diagnostics Verification", Proc. of Intemational Test Conference, October, 
1995, pp. 994-1002, an alternate fault injection method is proposed for system diagnostics 
verification. It achieves several improvements over the designs in Chau, but the area ov^head 
can be as high as 50 to 100% depending on the pad type. There are also some comphance issues 
with the IEEE 1 149.1 Boundary Scan standard. 

10 [0013] The system described by Nadeau-Dostie et al. requires modification of the B-S 

register so that the update state of TAP controller is suppressed to avoid the corruption of the 
data that was previously shifted in. To prevent the rippling effect on the output of a fault 
injection pin, two separate B-S cells are used, one for storing the fault injection selection data 
and the other for the fault injection value, instead of two FFs within a B-S cell, as proposed by 

15 Chau. 

[0014] The methods and systems proposed by both Chau and Nadeau-Dostie et al. can 
not be implemented xmless IEEE 1 149.1 Boimdary Scan standard compUant architecture is 
modified as proposed by Chau and Nadeau-Dostie et al. 

[0015] The previously proposed systems and methods do not fiilfiU a present need for a 
20 fault injection system and method that uses existing IEEE 1 149.1 Boundary Scan standard 

compliant resources without modification, and which can be implemented by existing installed 
operating systems. Further, the previously proposed systems and methods do not ftilfiU a present 
need for a fault injection system and method that is operative in system mode. 

SUMMARY OF THE INVENTION 

25 [0016] The present invention includes a system for fault injection of a circuit device, 

which uses existing IEEE 1 149.1 Boundary Scan standard compliant resources without 
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modification, and which can be implemented by existing installed operating systems. The system 
has, a fault selection circuit adapted with fault selection data identifying selected circuit outputs 
of the circuit device, a fault value circuit adapted with fauh values for injection on corresponding 
selected circuit outputs, and the fault selection circuit controlling the selected circuit outputs in 
5 place of system logic control during the injection of respective fault values. 

[0017] According to an embodiment of the invention, a fault selection circuit is in the 
form of a user defined scan register in the circuit device. 

[0018] According to another embodiment of the invention, a fault value circuit is in the 
form of a user defined scan register in the circuit device. 

10 [0019] According to another embodiment of the invention, the system selects an intemal 

register for fault injection, and the intemal register is in the system logic of the circuit device. 

[0020] Another embodiment of the invention is a method for injection of fault values at 
selected pins of a programmable circuit device. The method steps include, storing and updating 
fault injection selection data in a first register; scanning and storing fault injection values in a 
15 second register; and updating the fault injection selection data and the fault injection values at 
selected pins of the programmable circuit device, while the selected pins are controlled by the 
first and second register instead of by system logic of the circuit device. 

[0021] Embodiments of the invention will now be described by way of example with 
reference to the accompanying drawings. 

20 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0022] Figure 1 is a circuit diagram of a user defined scan register (USR) or cell 
according to the present invention. 

[0023] Figure 2 is a circuit diagram of a system for fault injection in system mode 
25 according to the present invention. 



PH1\106878S.8 



Express Mail Label EV175965973US 

PATENT 

[Y0242-00286] 



CHAKRABORTY 8-2 



DETAILED DESCRIPTION 

[0024] The present invention comprises a novel fault injection (e.g., fault insertion) 
system and method to facilitate the development of high quality system testing. The method and 
system relies on existing boundary scan resources, without requiring modification, to inject a 
5 fault value at a selected output, which includes, but is not limited to, a pin and a fault injection 
functional internal register of a Field Programmable Gate Array (FPGA). When a pin is referred 
to herein, the pin means an output, input or bidirectional input-output where fault injection is 
desired. Further, when an FPGA is referred to herem, the FPGA means a programmable 
semiconductor device, including, but not limited to, a programmable gate array, a programmable 
10 read only memory, and an integrated circuit device having programmable or burnable fuses. 

[0025] The invention injects fault values while the FPGA is in system mode, rather than 
in boundary scan mode. Thus, the invention uses existing and unmodified boundary scan 
resources, which are compliant with the IEEE 1 149.1 Boundary Scan standard, and which 
include; an existing test access port (TAP) controller and existing B-S signals and instructions. 

1 5 [0026] In Xilinx™ FPGAs (as well as ORCA™ FPGAs), there are two available 

user-defined instructions, USERl and USER2. A logic block named B-SCAN in these FPGAs is 
similar to the BNDSCAN in ORCA™ FPGAs. The BSCAN logic block accesses the BS TAP 
controller for signals used in the design of the user defined instructions. The user defined 
instructions are used in the design of a BS cell (100) to inject a fault value at any pin of the 

20 FPGA while the FPGA is on a circuit board. This enables fault injection testing of fee FPGA 
while operating on the circuit board. The resulting BS cell (100) is compliant with the industry 
standard, IEEE 1 149. 1 , since the user defined instructions are built in to an FPGA, Such user 
defined instructions are implemented without requiring new instruction signals for an existing 
BS TAP controller. Thus, the BS cell (ICQ) is adapted to use an existing BS TAP controller 

25 without modification. 

[0027] In a Xilinx™ FPGA design, once the user-defined instructions are used (i.e., once 
the B-SCAN logic block is used), there are five (JTAG) pins compliant with the IEEE 1 149.1 
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Boundary Scan standard. These defined (JTAG) pins are dedicated for B-S only and not 
available for general I/O any more. 

[0028] If an FPGA has only one xxser-defined instruction available, it is possible to merge 
two USRs into one, where an adjacent pair of USR cells are used to store fault injection selection 
5 data and value respectively. However, the update state of the second USR cell must be 
suppressed to avoid data corruption. 

[0029] Due to the programmability of an FPGA, it costs less area overhead than the 
existing B-S based fault injection methods for ASICs. It is also possible to reconfigure where 
and what type of faults to be injected via B-S while the system is fimctioning. Although this 
10 method incurs additional delay of a multiplexer on the pin where a fault is injected, the area 
overhead and performance impact are significantly less than existing fault injection methods. 

[0030] According to design experiences of the existing fault injection methods and due to 
the frequent use of FPGAs in present day complex digital systems, five design-for-testability 
(DFT) objectives are set for an FPGA fault injection method: (1) use the existing FPGA B-S 

1 5 architecture, (2) comply with the IEEE 1149. 1 Standard, (3) avoid the rippling effect on the 

output of a fault injection pin, (4) avoid data corruption problem in the update state of the TAP 
controller, and (5) core implementation of the fault injection (a truth table describing fault 
injection states in terms of fault injection selection data and fault injection value). In the 
following, the fault injection method according to the invention fiilfiUs these five DFT 

20 objectives. 

[0031] Figure 1 shows a user defined scan register (USRl) or (USR2) or cell (100). The 
USRl or USR2 cell (100) has a capture flip flop (FF) (1 10) and an update FF (120). The capture 
FF (1 10) acquires input data, and is prevented from changing state to shift the data to an output 
DO of the register (100) until the capture FF (1 10) has been shifted to an update state. This 
25 feature differs from using a single FF to both acquire data and shift the data to the output, which 
would cause data rippling. 



PH1\1068785.8 



Express Mail Label EV175965973US 

PATENT 

[Y0242-00286] 



CHAKRABORTY 8-2 



[00321 With further reference to Fig. 1 , the capture flip flop (1 10) has an input Si and 
output So, The output Do of the cell (100) is updated by the update flip flop (120) switched to an 
update state during the update state of the TAP controller. An update signal. Update DR, is 
supphed by the TAP controller to an AND gate (1 12) at the input side of the update flip flop 
5 (120). The capture flip flop (110) and the update flip flop (120) are activated by an enable signal 
SEL1/SEL2 from a BSCAN logic block when a corresponding user instruction USERl or, 
alternatively, USeR 2 is in effect. The BSCAN logic block is a known circuit in a commercially 
available FPGA. 

[0033] The USRl or USR2 cell (100) operates with boxmdary scan resources similarly as 
10 would a conventional B-S cell according to the IEEE Std. 1 149.1, with some key differences. As 
with the conventional B-S cell, the USR cell (100) includes a scan input Si, a clock input 
ClockDR, an update input UpdateDR, a scan output So, and a data output Do. Differing from a 
conventional B-S cell, the USR cell (100) includes a selection input SEL1/SEL2. 

[0034] The selection input SEL1/SEL2 of the USR cell (100) is coupled to a first input of 
15 a first AND gate (1 14) of the USR cell. The other input of the first AND gate (1 14) is coupled to 
the clock signal ClockDR such that the loading of the signal on the selection input SEL1/SEL2 is 
controlled by the clock signal. In the exemplary embodiment of the present invention, the 
selection input SEL1/SEL2 of the USRl or USR2 cell (100) comprises one of two logic levels 
(e.g., a logic "1" or a logic "0"). When the selection input SEL1/SEL2 is a logic "1", data is 
20 shifted to the capture flip-flop (110) at scan input S\. When the selection input SEL1/SEL2 is a 
logic "0", the scan input Si is disabled (i.e., no instruction may be loaded). The capture flip flop 
(110) changes state to shift the data to the update FF. The selection input SEL1/SEL2 is also 
coupled to a first input of the second AND gate (1 12) of the USR cell (100). The other input of 
the second AND gate (112) is coupled to the update signal Update DR such that the loading of 
25 the signal on the selection input SEL1/SEL2 is controlled by the update signal from the TAP 
controller. 
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[0035] The output of the capture flip-flop (110) is coupled to both the input of the update 
flip-flop (120) and the scan output So of the USRl or USR2 cell (100). The output of the update 
flip-flop (120) is coupled to the data output DO of the USRl or USR2 cell (100). 

[0036] According to the invention, a first BS cell (100) is used to scan and store fauh 
selection data, i.e., the identities of input and output pins. A second BS cell (100), a duplicate of 
the first BS cell (100), is used to scan and store fault injection values to be assigned to the input 
and output pins. Thus, two BS cells (100) of Fig. 1 are provided by the invention for each pin 
injected with a fault. For example, an FPGA with 600 pins, requires fault injection testing of 
only 50 pins. The user defined instructions for programming a commercially available FPGA, 
determines which pins are input and which pins are output. 

[0037] Each BS cell (100) has an AND gate (1 14) receiving the SEL1/SEL2 enable 
signal fi-om the BSCAN logic block. A clock signal. Clock DR, is received at the AND gate 
(1 14) fi-om one of the user defined instmctions USRl or USR 2. The first BS cell (100) receives 
an independent first clock signal from the first user defined instruction, USRl. The second BS 
cell (100) receives an independent second clock signal from the second user defined instruction, 
USR 2. Since two separate user defined instructions, USRl and USR2, are controlled by 
independent clock signals, the two BS cells (100) scan and store the fault selection values and 
the fault injection values, respectively, without rippling of pin values and fault injection values 
data corruption, when the respective update flip flops (120) are switched to the update status to 
inject the fault values on the selected pins. 

[0038] Figure 2 discloses a system 200 for fault injection. For each pin considered for 
fault injection, a cell USRl (100) captures and updates fault selection data (selected pins data). A 
cell USR2 (100) captures and updates fault injection values for injection on the selected pins. 

[0039] Fig. 2 discloses an FPGA with system logic (202) controlling the signal 
transmitting pins, of which pins A, B, C and D are examples. Pin D is an example of input pins. 
Pins B, C and E are examples of output pins. Pin A is an example of bidirectional pins. With the 
FPGA operating in system mode, the system logic (202) controls the pins. Signals to and from 
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system logic (202) are transmitted by the exemplary pins A-D. System logic (202) controls pins 
A-D over respective signal communications lines (204), (206), (208), (210) and (212). 

[0040] In the circuit disclosed by Fig. 2, the ell USRl (100) captures and scans data 
selecting the pins or other output locations to receive fault injection values. When a pin or other 
5 output location is to receive a fault injection value, the pin is under control of the USERl user 
instruction while a fault injection value is injected. When a pin is not selected to receive a fault 
injection value, the pin remains xmder control by the system logic (202). 

[0041] The invention performs fault injection using Boundary Scan resources compliant 
with the IEEE 1 149.1 Boundary Scan standard, while operating in system mode, rather than 
10 boundary scan mode. No modification is required for the Boimdary Scan configurations of 
existing installed systems. Thus, existing installed systems can implement the invention while 
operating in system mode, rather than boundary scan mode. 

[0042] The invention performs injection of a selected fault value on a selected pin while 
the other pins are controlled by system logic (202). Thus, system logic (202) does not have to be 

15 interrupted while the invention performs fault value injection on a selected pin. Further, the 
register or cell construction according to Fig. 1, rapidly changes the pin selections, and 
separately shifts injection values at rapid rates, which allows the system logic (202) to control all 
but a few pins that are under selection for fault injection values. The time duration is limited for 
interruption of the selected pins fi-om control of the system logic (202), while being injected witti 

20 a selected fault value. 

[0043] Fig. 2 discloses that the USRl (100) register, having the register construction of 
Fig. 1, comprises the pin selection logic, USR-TDl, by which the pins are selected for fault value 
injection, while the selected pins are controlled by the output of a corresponding multiplexer, 
mux 10. Fig. 2 fiirther discloses that the USR2 (100) register, having the register construction of 
25 Fig. 1 , comprises the fault value logic by which selected fault values are injected while the 

selected pins are removed fi-om control of the system logic (202), and controlled by the output of 
a multiplexer, mux, (214). 
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[0044] When the pin selection logic is "1" (One) for a corresponding pin, the pin is 
selected for injection of a corresponding fault value, and the selected pin value and 
corresponding fauh value are supplied to the mux (214) The output of the mux (214) directly 
controls the selected pin, without having to activate BSR-TDI boundary scan mode which would 
5 interrupt system mode operations of the system logic (202). 

[0045] When the pin selection logic is "0" (Zero) for a corresponding pin, the pin has not 
been selected for injection of a corresponding fault value. The mux (214) has no output to 
control the corresponding pin. The corresponding pin remains under control of the system logic 
(202) of the FPGA. Thus, selected fault values are injected on selected pins without having to 
10 suspend or interrupt system logic control of the other pins that are not being injected with 
selected fault values. 

[0046] According to another embodiment of the invention, the output of each mux (214) 
is supplied to a corresponding internal, fault injection site, a functional register REG (216) of the 
system logic 7. Thus, the FPGA is tested for internal faults, which would not limit the invention 
15 to testing only for FPGA output faults. 

[0047] The output pins of each FPGA or ASIC on a typical circuit board are serially 
connected in series chain connection, or daisy chain connection, with corresponding input pins of 
a subsequent FPGA or ASIC in the series chain connection. When the boundary scan register of 
an FPGA is interconnected by daisy chain connections with boundary scan registers of other 

20 FPGAs and ASICs on a circuit board, the invention injects fault values on selected outputs 

located in the daisy chain connections. The shift registers USRl-TDI and USR2-TDI, that have 
the construction of Fig. 1, scans the pin values and fault values corresponding to each of the pins 
in the series chain connection. Thus, the invention can be used to test the multiple FPGAs and 
ASICs on a typical circuit board in real time, while the circuit board is operating in a 

25 commimications system. 
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[0048] Table 1 shows the states of USR 1 and USR 2 with corresponding pins in various 
states of fault injection it^ations. Table 1, shows the states of the pins corresponding to injection 
of stuck-at fault injection values. Pin C of Fig. 2 embodies the fault injection values of Table 1. 

Table 1 : Fault injection (FT) function — witiiout stuck-open effect. 



FI Selection Data 


FI Value 


Output State 


FI Effect 


0 


0 


Driven by system logic 


no fault 


0 


1 


Driven by system logic 


no fault 


1 


0 


Driven by a constant 0 


stuck-at-0 


1 


1 


Driven by a constant 1 


stuck-at- 1 



5 

[0049] Table 2 shows the states of the pins corresponding to iterations of stuck-open as 
well as stuck-at fault injection values. The circuit of Fig. 2 includes a tri-state buffer (14) to 
implement the states described in Table 2. 

Table 2: Fault injection function — with a stuck-open effect. 



FI Selection Data 


FI Value 


Output State 


FI Effect 


0 


0 


Driven by system logic 


no fault 


0 


1 


High-Z 


stuck-open 


1 


0 


Driven by a constant 0 


stuck-at-0 


1 


1 


Driven by a constant 1 


stuck-at- 1 



10 

[0050] The system mode withholds boundary scan mode from the boundary scan register 
12 at the output side of pin A, while the output of the mux (214) directly controls pin C in the 
system mode. The pin A is a bidirectional signal pin. Thus an input signal is supplied from the 
pin A to the system logic (202) that controls the input side of the pin A, while withholding 
1 5 boundary scan mode from the boxmdary scan register (100) at the input side of pin A. 

[0051] Only output signal pins or a bidirectional signal pins in the output state are 
considered for fault injection. Output pin B, for which no fault injection values are intended is 
alwaj^ imder control of the system logic (202). Pin A is a bidirectional pin, which can be 
injected with either an input fault condition or an output fault condition. A selection of fault 
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values for different fault conditions can be injected for the input direction and/or the output 
direction. 

[0052] When USR 1 (100) is executed, the control signal SELl becomes active. Further, 
USR 1 (100) replaces the BS register in the circuit that receives TDI and TDO signals. FI pin 
5 selection data is shifted into USR 1 (100). 

[0053] When USR 2 (100) is executed, the control signal SEL 2 becomes active. Further, 
USR 2 (100) replaces the BS register in the circuit that receives TDI and TDO signals. FI fault 
value selection data is shifted into USR 2 (100), Thus, FI pin selection data and FI fault values 
are stored in two independent USR registers, which avoids rippling of selection data and 
1 0 corruption of fault values. 

[0054] The lengths of USRl and USR 2 circuits are equal to the number of pins where 
fault injections are needed. Lengthy USRl and USR 2 circuits consume excessive area and slow 
down system performance. The lengths of USRl (100) and USR2 (100) would be equal to the 
number and locations of pins where fault injection are needed. However, according to the 
1 5 invention, since not every pin is injected with a fault injection value at the same time, the two BS 
cells (100) are needed only at each output pin where fault injection is ongoing. Thus, the lengths 
of the USR 1 and USR circuitry is relatively short. Further, the FPGA is programmable to 
reprogram the circuit of Fig. 2 for implementation only at the desired iteration of pins for 
ongoing fault injection, which reduces the area overhead and performance impact. 

20 [0055] Once tiie faults are injected, as long as the FPGAs are in fimctional mode (i.e., 

SAMPLE mode), the injected fault effects are always in effect. Note that, the method according 
to the invention incurs an additional delay of one multiplexer on the pin where a fault is injected. 
For the output pin where fault injection is not desired, such as Pin B in Figure 2, no USR logic is 
allocated at all. 

25 [0056] The design of the fault injection logic incurs additional delay of a multiplexer on 

the fault injection pins. However, our method is designed for FPGAs, and the programmability 
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of an FPGA enables us to add fault injection logic only to where fault injection function is 
desired. Hence, area overhead and performance impact can be modified to the exact need. 

[0057] Because the fault injection logic is independent of system logic in the method 
according to the invention, the fault injection pattern can be changed while the system is 
5 functioning. This capability enables a new fault injection pattem, including fault injection value 
and selection data, to be shifted asynchronously during system mode function of the FPGA to 
improve the quality of system diagnosis and verification. 

[0058] According to the invention, boimdary scan cells operate with user defined 
instructions built into the FPGAs of the equipment to inject fault conditions directly on the 

10 equipment hardware, while the equipment runs in real time. This serves to change the 

functionaUty of the equipment hardware. The system diagnostic software is supposed to detect 
the hardware functionality change. Thus, the invention tests the system diagnostic software for 
its responsiveness to the hardware functionality change, without having to switch the operating 
equipment from system mode operation to boundary scan mode operation. While the operating 

15 equipment runs in real time, the system diagnostic software can be tested according to the 
invention. 

[0059] The invention enables each of the user-defined instmctions, USERl and USER2 
to inject a fault at any pin of the FPGA while the FPGA is mounted on a circuit board, such as a 
PCI card. Another application for the invention is vector verification. According to the invention, 
20 injecting stuck-on fault injection values (or. alternatively, injecting stuck- at fault injection 
values) on selected pins connected in a fault injection circuit between system logic of the 
programmable circuit device and the selected pins, while the programmable circuit device is 
mounted on a circuit board, is operative to test for vector verification of circuitry of the circuit 
board. 

25 [0060] An application of the invention for vector routing verification involves, injecting 

stuck-on fault injection values on selected first pins connected in a fault injection circuit between 
system logic of the programmable circuit device and the first pins, while the programmable 
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circuit device is mounted on a circuit board, to test for vector routing verification of the circuit 
board; and injecting stuck-at fault injection values on selected second pins connected in a fault 
injection circuit between system logic of the programmable circuit device and the second pins, 
while the programmable circuit device is mounted on a circuit board, to test for vector routing 
5 verification of the circuit board. 

[0061] Another application of the invention is testing a new algorithm, which involves, 
injecting stuck-on fault injection values on selected first pins connected in a fault injection circuit 
between system logic of the programmable circuit device and the first pins, while the 
programmable circuit device is moxmted on a circuit board being tested by verification test 
10 software, to test for verification of a new algorithm of the software; and injecting stuck-at fault 
injection values on selected second pins connected in a fault injection circuit between system 
logic of the programmable circuit device and the second pins, while the programmable circuit 
device is mounted on a circuit board being tested by verification test software, to test for 
verification of a new algorithm of the software, 

1 5 [0062] Although the invention has been described in terms of exemplary embodiments, it 

is not limited thereto. Rather, the appended claims should be construed broadly to include other 
variants and embodiments of the invention which may be made by those skilled in the art without 
departing from the scope and range of equivalents of the invention. 
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